CVE-2025-70102 | BDVDB-2026-340203 Detail

Description#

A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-options.c:1886), the code performs a member access on a NULL pointer of type 'struct dhcp_opt' when an unexpected/invalid option token or parsing state causes the lookup to yield NULL. The instrumented fuzzing build reports 'runtime error: member access within null pointer of type struct dhcp_opt' and aborts.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-15Record published in the CVE List.
2. Version 22026-10-30Most recent update recorded in the CVE List.